Does not prevent weak password via reset

Like this very simple plugin.  It works fine when setting the password in the backend.
But by following a reset password link to the reset page, you can still set a weak password.
What is needed to cover that case?